Public-key infrastructure

Certificate issuance, trust hierarchies, renewal automation and the failure modes of expiry.

In Public-key infrastructure

2 articles

Cryptographic engineering6 MIN READ

Certificate expiry outages are a design failure, not bad luck

A certificate that expires in production was not forgotten by an individual. It was issued by a process that did not include renewal, into a system that had no way to reload it.

13 August 2026

Cryptographic engineering6 MIN READ

Signatures are the harder half of the post-quantum migration

Key exchange migration is largely a configuration change. Signature migration runs into certificate sizes, fixed-width image headers, verifiers you cannot update and archives that must stay verifiable for decades.

6 April 2026

KEEP EXPLORING

Take the thinking
into your next discussion.

01 / WHITEPAPERSSpend more time with the framework.

Read the method, assumptions and questions to ask.

In Public-key infrastructure

Certificate expiry outages are a design failure, not bad luck

Signatures are the harder half of the post-quantum migration

A useful signal, when there is one.

Take the thinkinginto your next discussion.

Take the thinking
into your next discussion.